Help! Can't solve this.

All of your logs are clean so your problems may not be due to malware. You may want to trying doing a system restore to a time before you had the problem.

I do have a few questions though.

What are the below folder?

Code:

"C:\Users\elio\AppData\Local\"
INSTAL~1      Dec 11 2008              "Installer4592"
INSTAL~2      Dec 11 2008              "Installer5128"

What are the below files?

Code:

"C:\Users\elio\AppData\Roaming\"
kr56zg~1      Dec 14 2008          40  "KR56ZG2YE73GVCXB3T2UDEXAMC"
 
"C:\ProgramData\"
powjnvfp.pmy  Nov 23 2008        4098  "powjnvfp.pmy"

Is the below start page something you setup?
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.speedbit.com/

 

Well you are basically clean as far as malware goes but lets fix a few things.


Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.speedbit.com/
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

After clicking Fix, exit HJT.


Now we need to use ComboFix to remove a bunch of malware files.

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Now run Ccleaner!

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).


Then attach the below logs:

• C:\ComboFix.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!